Open Source Vulnerabilities

vitess

CVE-2023-29194 affecting package vitess for versions less than 16.0.2-1

node-matrix-js-sdk, node-matrix-js-sdk, node-matrix-js-sdk

SpiceDB binding metrics port to untrusted networks and can leak command-line flags

OpenFeature Operator vulnerable to Cluster-level Privilege Escalation

vitess allows users to create keyspaces that can deny access to already existing keyspaces

vm2 Sandbox escape vulnerability

net.snowflake:snowflake-jdbc

Snowflake JDBC vulnerable to command injection via SSO URL authentication

matrix-js-sdk vulnerable to invisible eavesdropping in group calls

HTTP header parsing could cause a deny of service

kamailio, kamailio, kamailio

kamailio vulnerabilities

curl, curl-minimal, libcurl, libcurl-devel, libcurl-minimal

curl: Fix of 3 CVEs

curl, curl-minimal, libcurl, libcurl-devel, libcurl-minimal

curl: Fix of 3 CVEs

curl, libcurl3, libcurl3-gnutls, libcurl3-nss, libcurl4-doc, libcurl4-gnutls-dev, libcurl4-nss-dev, libcurl4-openssl-dev

Fix CVE(s): CVE-2023-27536, CVE-2023-27535, CVE-2023-27533

curl, libcurl, libcurl-devel

curl: Fix of 3 CVEs

curl, libcurl, libcurl-devel

curl: Fix of 3 CVEs

matrix-js-sdk

matrix-js-sdk vulnerable to invisible eavesdropping in group calls

wayland, wayland, wayland, wayland, wayland

Security update for wayland

golang-github-prometheus-prometheus, golang-github-prometheus-prometheus, golang-github-prometheus-prometheus

Security update for golang-github-prometheus-prometheus

golang-github-prometheus-prometheus

Security update for golang-github-prometheus-prometheus

golang-github-prometheus-prometheus

Security update for golang-github-prometheus-prometheus